Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/3039BDD8915D11F1A738B7CFCE1D38B0.roa
File: 3039BDD8915D11F1A738B7CFCE1D38B0.roa (raw, json)
Hash identifier: o3leKe+LBYo082YH3AVT9HPAi7DCn/vmA/Ux4I8+KFY=
Subject key identifier: 50:75:C7:DC:DF:8A:B3:72:FC:32:B6:49:31:90:FC:BA:F8:9E:66:FA
Certificate issuer: /CN=F36424BFAF/serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
Certificate serial: 7B
Authority key identifier: 06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/3039BDD8915D11F1A738B7CFCE1D38B0.roa
Signing time: Thu 06 Aug 2026 06:08:05 +0000
ROA not before: Thu 06 Aug 2026 06:08:01 +0000
ROA not after: Mon 31 Aug 2026 06:08:01 +0000
asID: 37371
IP address blocks: 197.220.64.0/24 maxlen: 24
197.220.65.0/24 maxlen: 24
197.220.66.0/24 maxlen: 24
197.220.67.0/24 maxlen: 24
197.220.68.0/24 maxlen: 24
197.220.69.0/24 maxlen: 24
197.220.70.0/24 maxlen: 24
197.220.71.0/24 maxlen: 24
197.220.72.0/24 maxlen: 24
197.220.73.0/24 maxlen: 24
197.220.74.0/24 maxlen: 24
197.220.75.0/24 maxlen: 24
197.220.76.0/24 maxlen: 24
197.220.77.0/24 maxlen: 24
197.220.78.0/24 maxlen: 24
197.220.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 00:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36424BFAF, serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
Validity
Not Before: Aug 6 06:08:01 2026 GMT
Not After : Aug 31 06:08:01 2026 GMT
Subject: CN=6a7424c5-b6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:02:a7:61:32:4d:3e:cf:8b:1c:4a:5e:2c:
df:92:2c:79:f9:ba:d5:c9:69:bd:f3:7f:2e:69:c5:
f8:fa:bd:f7:2a:c3:03:f4:43:2e:a4:99:0e:1e:35:
fc:48:5c:cd:40:9d:4c:4e:a9:13:da:1a:ff:01:b0:
f5:59:06:ea:31:de:53:0c:6d:e5:07:ac:85:c0:cc:
55:26:d2:e3:ff:f3:74:85:26:c0:fa:ac:e2:6b:e4:
dd:39:2b:6a:d5:21:18:24:9e:d3:70:f7:c9:e1:d3:
9f:6b:aa:0b:2b:1c:12:5b:16:c0:22:56:af:84:e3:
b3:fe:a3:97:a0:b0:df:c6:7b:74:26:34:e5:a3:0f:
71:9c:ab:2f:d8:bf:f5:d0:8b:bc:9e:3f:10:97:c9:
ac:ee:33:ef:f6:11:5d:5b:30:d7:b3:95:64:4e:ee:
d6:a9:a1:9e:78:5d:bc:cb:55:83:aa:ce:ad:3a:43:
51:16:70:67:2e:41:c2:c6:94:d3:e3:59:bf:f5:cf:
5a:6f:b0:30:83:a8:35:19:c3:d4:85:3d:87:a0:9c:
a8:f6:0e:65:f4:c8:1a:01:f6:9d:f3:c7:a4:c9:52:
70:89:47:21:c4:e7:4c:c0:f6:e9:64:c3:4b:d2:4a:
54:b7:1d:80:41:69:34:f4:2c:0b:d3:60:51:76:73:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:C7:DC:DF:8A:B3:72:FC:32:B6:49:31:90:FC:BA:F8:9E:66:FA
X509v3 Authority Key Identifier:
keyid:06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/3039BDD8915D11F1A738B7CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.220.64.0/20
Signature Algorithm: sha256WithRSAEncryption
15:09:ab:25:9d:2f:9c:0f:d1:a7:2f:a7:61:4c:5c:19:73:2f:
31:e7:1f:1c:d9:8d:ce:12:79:32:81:9f:1a:d6:39:ec:cc:58:
f0:a5:65:61:a6:20:e5:05:f9:22:04:27:94:38:fb:8c:00:51:
2f:8d:1f:2b:c6:01:d5:02:a9:1c:0a:ff:9a:e6:42:2c:8f:39:
ce:79:16:12:f8:db:47:08:df:78:ce:0e:90:63:66:bf:fa:74:
89:f3:09:06:88:23:2d:a2:f6:6a:5f:bb:08:44:07:6b:fc:8c:
14:0a:5f:f1:1a:6d:cb:46:34:3a:1e:53:b0:af:14:d3:ce:9d:
a7:dc:d5:da:64:8d:51:e0:c6:15:ab:5d:de:bd:3a:44:ae:1f:
70:69:18:04:b4:76:eb:fe:08:a2:c0:fb:bb:20:75:36:43:14:
dd:33:e0:9e:74:64:38:87:27:5b:4c:60:54:05:ab:26:38:9c:
ed:11:c5:14:16:08:3d:83:ae:93:b5:07:58:c5:26:09:be:cb:
05:d1:0d:cb:06:59:f3:9e:89:4a:25:22:7e:bd:43:8d:11:9e:
d1:d9:83:85:19:dd:81:13:c5:2d:47:d0:84:b7:3b:22:ae:40:
cc:77:0a:8d:cc:95:a8:dd:4f:17:e9:1c:ac:a1:ac:63:9c:66:
15:e1:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:32:24 2026 by rpki-client